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I CLAIM: 

1. A method of securely transmitting light information in a network along a path 
comprised of a plurality of untrusted network devices, said untrusted network devices 
comprising a plurality of switching devices, and said method comprising: 

sending at least one setup message to one of said network devices; 

based on said setup message, configuring at least one of said network devices to direct 
said light along said path to a terminal endpoint using at least one of said switching devices, 
whereby a configured path is established; 

sending a plurality of pulses of said light along said configured path, said pulses having a 
first set of randomly selected quantum bases; and 

measuring a quantum state of said light pulses using a second set of randomly selected 
quantum bases, thereby providing a measured quantum state. 

2. A method according to claim 1, wherein said plurality of switching devices 
further comprises a plurality of optical switching devices. 

3. A method according to claim 1, wherein said configured path is multiplexed onto 
a single fiber with at least one other quantum-cryptographic signal. 

4. A method according to claim 3, wherein said configured path is multiplexed using 
wavelength division multiplexing. 
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5. A method according to clainm 3, wherein said configured path is multiplexed using 
time division multiplexing. 

6. A method according to claim 1, wherein said setup message is sent using the CR- 
LDP protocol. 

7. A method according to claim 1, wherein said setup message is sent using the 
RSVP protocol. 

8. A method according to claim 1, wherein said setup message is sent via a data 
network using TCP/IP datagrams. 

9. A method according to claim 1, wherein said setup message is sent via an 
asynchronous-transfer-mode network. 

10. A method according to claim 1, wherein said optical switching device comprises 
a micro-electro-mechanical system mirror array. 

11. A method according to claim 1, wherein said optical switching device comprises 
photonic-band-gap material. 

12. A method according to claim 1, wherein said optical switching device comprises a 

mirror. 
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13- A method according to claim 1, wherein said light pulse in said plurality of light 
pulses comprises a single polarized photon. 

14. A method according to claim 1, further comprising: 
establishing at least one sending quantum basis corresponding to said first set of 
randomly selected quantum bases; 

estabUshing a corresponding receiving quantum basis corresponding to said second set of 
5 randomly selected quantum bases; 

determining whether said sending quantum basis has an equivalent orientation to said 
corresponding receiving quantum basis; 

discarding any improperly oriented said light pulses for which said sending quantum 
basis was determined to be different from said receiving quantum basis, whereby a first 
10 remaining stream of said light pulses remains; 

comparing said measured quantum state of a random subset of said first remaining stream 
of light pulses as sent, to said first remaining stream of light pulses as received, to produce a set 
of variant light pulses having a quantity; 

establishing a predetermined threshold against which to compare said quantity; 
15 determining whether said quantity exceeds said predetermined threshold; 

discarding said random subset of said first remaining stream of light pulses, whereby a 
second remaining stream of light pulses remains; and 

if said predetermined threshold is not exceeded, using said second remaining stream of 
light pulses as a key to encrypt and decrypt data. 
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15. A method according to claim 14, wherein said sending and receiving quantum 
bases are polarization bases chosen from a group of polarization bases consisting of: 

a diagonal polarization basis; and 
a rectilinear polarization basis. 

16. A method according to claim 14, wherein said sending and receiving quantum 
bases are phase-shift bases chosen from a group of phase-shift bases consisting of: 

a 45 degree phase-shift basis; and 
a 90 degree phase-shift basis. 

17. A computer-readable medium containing instructions capable of causing at least 
one digital computer to securely transmit light information in a network along a path comprised 
of a plurahty of untrusted network devices, said untrusted networking devices comprising a 
plurality of switching devices, said computer-readable medium comprising: 

program code for sending at least one setup message to one of said network devices; 

program code for configuring at least one of said network devices to direct said light 
along said path to a terminal endpoint using at least one of said switching devices based on said 
setup message, whereby a configured path is established; 

program code for sending a plurality of bits using pulses of said light along said 
configured path, said pulses having a first set of randomly selected quantum bases; and 

program code for measuring a quantum state of said light pulses using a second set of 
randomly selected quantum bases. 
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18. A method according to claim 17, wherein said plurality of switching devices 
further comprises a plurality of optical switching devices. 

19. A system in which light information is securely transmitted in a network along a 
path comprised of a plurality of untrusted network devices, said plurality of untrusted network 
devices comprising a plurality of switching devices, said system comprising: 

an electrical controller for controlling at least one of said switching devices, wherein said 
electrical controller is configured to receive at least one setup message from which said 
controller determines how to control said at least one of said switching devices; 

wherein said at least one of said switching devices is configured to be oriented into at 
least two positions; 

wherein said electrical controller orients said plurality of switching devices to direct 
optical energy along said path; 

a light sending apparatus configured to send quantum-cryptographic light pulses along 
said path; and 

a light measuring apparatus configured to observe said quantum-cryptographic light 

pulses. 

20. A method according to claim 19, wherein said plurality of switching devices 
further comprises a plurality of optical switching devices. 
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21. A system according to claim 19, wherein said optical switching device comprises 
a micro-electro-mechanical system mirror array. 

22. A system according to claim 19, wherein said optical switching device comprises 
photonic-band-gap material. 

23. A system according to claim 19, wherein said optical switching device comprises 
a mirror, 

24. A system according to claim 19, further comprising a multiplexer configured to 
multiplex said configured path onto a single fiber with at least one of said quantum- 
cryptographic signal. 

25. A system according to claim 24, wherein said multiplexer employs dense 
wavelength division multiplexing. 

26. A system according to claim 24, wherein said multiplexer employs time division 
multiplexing. 

27. A system according to claim 19, wherein said setup message is sent using a CR- 
LDP protocol. 
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28. A system according to claim 19, wherein said setup message is sent using an 
RSVP protocol. 

29. A system according to claim 19, wherein said setup message is sent via a data 
network using TCP/IP datagrams. 

30. A system according to claim 19, wherein said setup message is sent via an 
asynchronous-transfer-mode network. 

31. A system according to claim 19, wherein said optical switching device comprises 
a micro-electro-mechanical system device. 

32. A system according to claim 19, wherein each pulse in said quantum- 
cryptographic light pulses comprises a single polarized photon. 

33. Apparatus operational with light and with a polarized light pulse originating from 
an upstream source and terminating with a downstream destination, said apparatus comprising: 

means for controlling at least one means for directing said light, wherein said controlling 
means is configured to receive at least one configuration message for configuring said directing 
means; 

means for orienting said directing means into at least two orientations; 
said controlling means including means for causing said orienting means to orient the 
directing means into an orientation configured to direct said polarized light pulse from said 
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upstream source to said downstream destination, forming a path from an origin endpoint to a 
terminal endpoint; 

means for sending polarized-light from said origin endpoint, said sending means 
configured to send quantum-cryptographic light pulses along said path; and 

means for measuring said polarized-light at said terminal endpoint, said measuring means 
configured to observe said quantum-cryptographic light pulses. 



29 



